Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
File:                     5Lqtn19putkQB1-OHYBetB0N98s.mft (raw, json)
Hash identifier:          UEHKHOltTVPRFcR7h4wz0dqbL7c0xofplXvDAiPzW8g=
Subject key identifier:   E1:F9:D6:93:CF:A7:7A:E3:BE:47:A0:01:C1:4D:B5:21:5F:F4:CC:10
Authority key identifier: E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
Certificate issuer:       /CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Certificate serial:       019EBFC933BEB8ED8669E135459ECD51DD76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
Manifest number:          1243
Signing time:             Sat 13 Jun 2026 07:01:34 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:34 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:34 +0000
Files and hashes:         1: 5Lqtn19putkQB1-OHYBetB0N98s.crl (hash: 2fG3GpBiaAbTKY0qxcAs+ALDNI2E4eKL1Icao1bmqEY=)
                          2: V0hqPIINhp_WNvjzrr7PJydJ3zE.roa (hash: 201DsxPOm6cpm2Im3U0XIX6Q6+lglCsbvOqe62R0Yfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:33:be:b8:ed:86:69:e1:35:45:9e:cd:51:dd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
        Validity
            Not Before: Jun 13 07:01:34 2026 GMT
            Not After : Jun 14 07:01:34 2026 GMT
        Subject: CN=e1f9d693cfa77ae3be47a001c14db5215ff4cc10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:5c:2f:94:c5:ca:50:31:86:d4:46:00:ff:
                    aa:d2:38:06:11:93:54:fe:6a:5e:9e:6e:51:d0:92:
                    15:3d:69:33:b5:b1:4c:25:7f:72:55:f1:74:9f:8f:
                    df:d6:a6:7d:a1:b1:bf:53:b7:31:7d:7f:b7:ae:a4:
                    98:f3:c5:73:87:fd:b4:c0:c6:ea:9d:36:e7:bb:1e:
                    e8:b5:b7:57:30:54:c0:9f:a7:1d:2b:84:d0:1d:79:
                    ca:23:50:d2:5c:34:81:26:6b:86:56:13:e6:4b:ed:
                    38:0f:90:e4:ac:0f:53:71:de:af:e6:a1:11:d8:4c:
                    3c:d0:1c:37:fd:cc:3f:e0:64:07:38:2a:e2:85:07:
                    c8:20:93:01:36:dc:6c:5c:06:66:e2:91:ac:d5:5e:
                    0e:4d:bc:c7:23:08:8b:11:b8:01:fe:57:31:05:ad:
                    9a:cf:ef:57:2b:59:2a:27:6a:27:96:e4:85:6b:33:
                    2b:5a:c2:e2:56:be:17:6f:6f:3d:61:d2:5d:e4:a3:
                    19:90:17:a0:e3:b0:10:e1:98:29:e5:ce:77:ca:38:
                    34:bd:c6:0b:2a:f4:24:2f:99:b7:c7:d8:c0:9a:fe:
                    58:d4:72:f5:82:d9:a5:9f:72:f9:e8:2f:7b:aa:30:
                    0c:55:4c:a6:34:7b:0c:72:7a:a5:21:21:8b:6d:a4:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F9:D6:93:CF:A7:7A:E3:BE:47:A0:01:C1:4D:B5:21:5F:F4:CC:10
            X509v3 Authority Key Identifier:
                keyid:E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:34:fb:59:f3:be:9b:21:a3:b6:31:af:d4:80:65:f8:d2:ed:
         2d:b1:3a:c3:1c:54:57:88:7b:16:aa:c6:b7:52:f9:d9:09:df:
         4a:cc:33:65:d0:72:fa:3b:90:18:1e:29:39:a6:29:31:20:c8:
         0e:20:15:6b:93:c9:df:05:c1:81:dc:67:85:36:cf:0c:63:03:
         ac:63:93:ab:37:72:d4:f2:dc:29:ff:8a:8f:94:22:37:4c:ae:
         6a:67:ad:41:bd:15:ce:01:9a:2b:f0:3a:f9:d0:6e:63:7b:63:
         4c:e2:4a:d9:71:ce:66:84:dc:40:5c:d0:e7:da:e8:61:b0:ba:
         55:db:5c:88:1f:a0:cf:b5:62:ab:d8:f0:95:8a:8c:5c:2c:1c:
         d4:3c:e1:8f:07:e3:22:9c:5a:2b:fa:91:65:e6:e7:e8:00:ca:
         c0:73:c0:72:35:1c:54:1c:74:fe:a7:89:5e:b6:57:60:fa:60:
         b1:3f:a5:17:d6:a6:09:01:31:9c:3a:3a:9e:db:9a:61:88:73:
         5f:32:8b:17:a1:b4:f7:7d:70:bc:f4:ee:8f:b8:57:92:ed:55:
         34:31:a0:48:8f:c4:e1:6c:d2:e0:ca:f0:5c:bc:1f:ed:71:c8:
         c3:c0:3a:b2:cb:c1:bc:33:ca:ff:b5:1e:41:e4:1e:3e:12:0c:
         4c:18:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:57 2026 by rpki-client